skills/mukul975/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/Gen Agent Trust Hub
detecting-aws-credential-exposure-with-trufflehog
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include installing TruffleHog via pip and from its official GitHub repository.
- [REMOTE_CODE_EXECUTION]: The documentation includes a command to pipe an installation script from the trufflesecurity GitHub repository directly into the shell. This is the official setup method for the tool.
- [COMMAND_EXECUTION]: The provided Python agent script uses the subprocess module to execute TruffleHog and AWS CLI commands for scanning and key management.
- [SAFE]: Static analysis detections of hardcoded API keys were found to be harmless placeholders used in documentation and examples.
Audit Metadata